Pmnh

**Name of the Vulnerable Software and Affected Versions** LuxSoft LuxCal Web Calendar versions prior to 5.2.0 **Description** An unauthenticated attacker can manipulate a POST request, allowing the attacker's session to be authenticated as any registered LuxCal user, including the site administrator. **Recommendations** For versions prior to 5.2.0, update to version 5.2.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** LuxSoft LuxCal Web Calendar versions prior to 5.2.0 **Description** The issue allows an unauthenticated attacker to manipulate a cookie value, enabling the attacker's session to be authenticated as any registered LuxCal user, including the site administrator. **Recommendations** For versions prior to 5.2.0, update to version 5.2.0 or later to resolve the issue.